5 ms·

Nothing but praise for Ghidra. It’s very powerful and intuitive to use. I’m still stunned that the NSA contributed to the public for once

by _lvbh 2y ago

Already__Taken 2y ago
what you don't want all their crypto libraries? As targeted as go, this is right up there.
BSDobelix 2y ago
>I’m still stunned that the NSA contributed to the public for once They contributed SELinux too and sponsored the TrustedBSD Project.
- phone8675309 2y ago
  As good as SELinux and TrustedBSD are, I wouldn't expect them to be any sort of defense against the NSA. I wouldn't expect them to publish anything that they can't already own when they want to.
  - BSDobelix 2y ago
    The only thing that can protect you from state actors is a one-way data diode, and/or a complete air gap system with rigorous physical security AKA another state...and even then...spies ;)
vsnf 2y ago
You might be familiar with NSA as an offensive agency interested in subverting security systems, but it's actually composed of two separate and often warring divisions, the second of which is defensive in nature and is interested in securing systems. It is this second division which has a history of contributing in good faith to security projects, public and otherwise.
- deleted 2y ago
  [deleted]
- willis936 2y ago
  Which one is responsible for their bad faith, public, defensive contributions? https://en.wikipedia.org/wiki/Dual_EC_DRBG https://en.wikipedia.org/wiki/Dual_EC_DRBG
  - robertlagrant 2y ago
    That seems offensive.
    - phone8675309 2y ago
      I thought the offensive part of the NSA was the part that was capturing encrypted Internet traffic to later decrypt.
      - red-iron-pine 2y ago
        offensive, in the sense that breaking key cryptograph would allow them into (foreign) systems. defensive in the sense that the block access into (American gov & private sector) systems via things like SELinux
    - deleted 2y ago
      [deleted]
isomorphic- 2y ago
The NSA has contributed many things such as SELinux and more.
lars_francke 2y ago
They also contributed Apache NiFi but that was much earlier: https://nifi.apache.org/ https://nifi.apache.org/

Nothing but praise for Ghidra. It’s very powerful and intuitive to use. I’m still stunned that the NSA contributed to the public for once

by _lvbh 2y ago

Nothing but praise for Ghidra. It’s very powerful and intuitive to use. I’m still stunned that the NSA contributed to the public for once

Already__Taken 2y ago

what you don't want all their crypto libraries? As targeted as go, this is right up there.

BSDobelix 2y ago

>I’m still stunned that the NSA contributed to the public for once They contributed SELinux too and sponsored the TrustedBSD Project.

phone8675309 2y ago
As good as SELinux and TrustedBSD are, I wouldn't expect them to be any sort of defense against the NSA. I wouldn't expect them to publish anything that they can't already own when they want to.
- BSDobelix 2y ago
  The only thing that can protect you from state actors is a one-way data diode, and/or a complete air gap system with rigorous physical security AKA another state...and even then...spies ;)

vsnf 2y ago

You might be familiar with NSA as an offensive agency interested in subverting security systems, but it's actually composed of two separate and often warring divisions, the second of which is defensive in nature and is interested in securing systems. It is this second division which has a history of contributing in good faith to security projects, public and otherwise.

deleted 2y ago
[deleted]
willis936 2y ago
Which one is responsible for their bad faith, public, defensive contributions? https://en.wikipedia.org/wiki/Dual_EC_DRBG https://en.wikipedia.org/wiki/Dual_EC_DRBG
- robertlagrant 2y ago
  That seems offensive.
  - phone8675309 2y ago
    I thought the offensive part of the NSA was the part that was capturing encrypted Internet traffic to later decrypt.
    - red-iron-pine 2y ago
      offensive, in the sense that breaking key cryptograph would allow them into (foreign) systems. defensive in the sense that the block access into (American gov & private sector) systems via things like SELinux
  - deleted 2y ago
    [deleted]

isomorphic- 2y ago

The NSA has contributed many things such as SELinux and more.

lars_francke 2y ago

They also contributed Apache NiFi but that was much earlier: https://nifi.apache.org/ https://nifi.apache.org/